Audits application code and endpoints for common security vulnerabilities and weaknesses.
npx skills add https://github.com/Mang30/myskills --skill security-review-mang30
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/Mang30/myskills/tree/main/skills/security-review Command: npx skills add https://github.com/Mang30/myskills --skill security-review-mang30
Reduces the risk of security vulnerabilities by guiding you to consistently apply best practices for authentication, input handling, secrets management, and safe error/logging patterns.
Ask the security-review skill to audit your changes for authentication, input validation, secrets handling, and injection/XSS/CSRF protections before you ship.
High-intent search queries and answers about installing and using this skill.
An API security audit verifies authentication flows, input validation, and rate limiting across endpoints. It enforces parameterized database access, schema-based validation, and generic error messages to prevent common vulnerabilities like SQL injection and sensitive data leakage.
Preventing SQL injection and XSS requires parameterized database access, HTML sanitization, and schema-based input validation. Implementing secure session handling and enforcing strict input checks mitigates malicious payload execution across typical web and API stacks.
Secure secrets management checks verify safe storage of certificates and credentials. It enforces proper redaction of sensitive data in logs and ensures application code avoids hardcoding secrets, replacing them with secure storage mechanisms.
You can automate security tests for authentication and authorization by including pre-deploy readiness checklists. Sample automated tests verify auth flows, input validation, and rate limiting to ensure throttling and access controls function correctly before shipping.
Code hardening protects against CSRF and data leakage by enforcing httpOnly cookies, CSRF defense tokens, and redaction of sensitive information. It ensures endpoints return generic error messages and implement strict dependency hardening to block exposure.
You need a security review when implementing authentication, handling file uploads, or managing database queries. It targets typical web and API stacks to enforce safe error patterns, schema-based validation, and dependency safety before deployment.
GoosLabAutomates AST-based code search, security scanning, and codemod transformations across multi-language codebases using sg CLI and MoAI-ADK integration.
thmspiGenerate security review checklists for authentication, input handling, and API endpoints.
amanhsnAutomate application security operations with Python scripts for vulnerability scanning and compliance verification.
gerald-icaAutomate SQL injection testing and database enumeration with SQLMap.
